[users@httpd] suEXEC documentation

[Stian Brattland <st...@brattland.no>]

Dear all,

I have justed startet to experiment with suEXEC and Apache. I've 
successfully configured a web server with the suEXEC feature,
and everything seems to work fine. However, there are a couple of things 
in the documentation which i am a little uncertain about.
I am therefore hoping that someone kindly will be willing to share some 
of their knowledge here. For your reference, the documentation
can be found on http://httpd.apache.org/docs/2.0/suexec.html.

The suEXEC documentation outlines that it runs through 20 different 
checks before a given script is executed. What i am a little
uncertain about is the check #16 and #18.

#16. Is the target CGI/SSI program not writable by anyone else?
#18. Is the target user/group the same as the program's user/group.

My questions with regard to the above checks are:

1. With regard to #16, does "CGI/SSI program" mean the php parser itself?
2. With regard to #18, does "the program" refer to the same "CGI/SSI" 
program as described in #16?

Last, does the ownership of the actual script (say index.php) ever play 
a role in this context?

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org